New “Gentlemen” Ransomware Targets 17 Countries

A sophisticated new ransomware group calling itself “Gentlemen” has emerged, striking organizations across 17 countries today. Unlike typical “Ransomware-as-a-Service” gangs, this appears to be a private, highly skilled team focusing on high-value targets.

The Threat Breakdown:

• 🎯 Targets: Manufacturing, Healthcare, and Insurance sectors.
• 🔓 Tactic: “Double Extortion” – they steal your data before locking it to force payment.
• ⚙️ Technicals: The malware is written in Go (making it harder to analyze) and drops a specific ransom note named README-GENTLEMEN.txt.
• 🖥️ Indicators: Look for changes to desktop wallpapers and the specific ransom note file on endpoints.

Defense: Since this group avoids the affiliate model, their attacks are likely more targeted and less noisy than common campaigns. Ensure your backups are offline and your endpoint detection is tuned for “Go” binaries.

#CyberSecurity #Ransomware #GentlemenGroup #InfoSec #ThreatIntel #Planetmav #DataProtection